diff --git a/modules/logging-release-notes-6-2-13.adoc b/modules/logging-release-notes-6-2-13.adoc new file mode 100644 index 00000000000..70844d703de --- /dev/null +++ b/modules/logging-release-notes-6-2-13.adoc @@ -0,0 +1,59 @@ +// Module included in the following assemblies: +// +// * release_notes/logging-release-notes-6.2.adoc + +:_mod-docs-content-type: REFERENCE +[id="logging-release-notes-6-2-13_{context}"] += Logging 6.2.13 Release Notes + +[role="_abstract"] +This release includes link:https://access.redhat.com/errata/RHSA-2026:68349[RHSA-2026:68349]. + +[id="logging-release-notes-6-2-13-bug-fixes_{context}"] +== Bug fixes + +* Before this update, the `vector_buffer_max_byte_size` metric always reported a value of `0` in Logging 6.2.6 and later, regardless of the configured buffer size. A missing type cast in the Vector buffer metrics code caused this regression. With this update, `vector_buffer_max_byte_size` correctly reports the configured maximum buffer size. +(https://redhat.atlassian.net/browse/LOG-8115[LOG-8115]) + +* Before this update, the `detectMultilineException` filter required Java exception stack traces to follow strict indentation patterns. Applications that emitted exception lines without consistent nesting caused Vector to prematurely flush incomplete stack traces as individual log events. With this update, the multi-line exception detection rules are more permissive, correctly grouping stack traces that contain non-indented lines within the exception body. +(https://redhat.atlassian.net/browse/LOG-9565[LOG-9565]) + +* Before this update, the metrics server in the log-file-metric-exporter did not configure HTTP connection timeouts. This left the server vulnerable to connection-exhaustion attacks where slow clients could hold connections open indefinitely, potentially exhausting file descriptors and goroutines in the collector pod. With this update, the metrics server applies appropriate read, write, and idle timeouts. +(https://redhat.atlassian.net/browse/LOG-9940[LOG-9940]) + +* Before this update, one or more collector pods could fail to start after an unclean shutdown when using `deliveryMode: AtLeastOnce`. An interrupted write operation during pod termination could leave the Vector disk buffer in a corrupted state, causing subsequent pod startups to fail with an `InvalidProtobufPayload` error. With this update, Vector correctly handles and recovers from corrupted disk buffer states on restart. +(https://redhat.atlassian.net/browse/LOG-9941[LOG-9941]) + +* Before this update, Vector could enter a `CrashLoopBackOff` state due to a Rust integer overflow when subtracting time durations in internal timing calculations. With this update, the code corrects the timing calculation to prevent the overflow, and Vector no longer crashes unexpectedly. +(https://redhat.atlassian.net/browse/LOG-9999[LOG-9999]) + +[id="logging-release-notes-6-2-13-cves_{context}"] +== CVEs + +* link:https://access.redhat.com/security/cve/CVE-2026-15792[CVE-2026-15792] + +* link:https://access.redhat.com/security/cve/CVE-2026-18140[CVE-2026-18140] + +* link:https://access.redhat.com/security/cve/CVE-2026-29181[CVE-2026-29181] + +* link:https://access.redhat.com/security/cve/CVE-2026-32283[CVE-2026-32283] + +* link:https://access.redhat.com/security/cve/CVE-2026-33818[CVE-2026-33818] + +* link:https://access.redhat.com/security/cve/CVE-2026-35469[CVE-2026-35469] + +* link:https://access.redhat.com/security/cve/CVE-2026-41178[CVE-2026-41178] + +* link:https://access.redhat.com/security/cve/CVE-2026-42502[CVE-2026-42502] + +* link:https://access.redhat.com/security/cve/CVE-2026-56852[CVE-2026-56852] + +* link:https://access.redhat.com/security/cve/CVE-2026-56853[CVE-2026-56853] + +* link:https://access.redhat.com/security/cve/CVE-2026-56858[CVE-2026-56858] + +* link:https://access.redhat.com/security/cve/CVE-2026-56859[CVE-2026-56859] + +* link:https://access.redhat.com/security/cve/CVE-2026-56860[CVE-2026-56860] + +* link:https://access.redhat.com/security/cve/CVE-2026-56862[CVE-2026-56862] diff --git a/release_notes/logging-release-notes-6.2.adoc b/release_notes/logging-release-notes-6.2.adoc index 38d160ef919..938769e684f 100644 --- a/release_notes/logging-release-notes-6.2.adoc +++ b/release_notes/logging-release-notes-6.2.adoc @@ -9,6 +9,8 @@ toc::[] [role="_abstract"] The following release notes describe the updates in {LoggingProductName} 6.2. They include new features and enhancements, bug fixes, security updates (CVEs), known issues, and Technology Preview features. +include::modules/logging-release-notes-6-2-13.adoc[leveloffset=+1] + include::modules/logging-release-notes-6-2-12.adoc[leveloffset=+1] include::modules/logging-release-notes-6-2-11.adoc[leveloffset=+1]